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Amendments to the Claims 



1. (CURRENTLY AMENDED) 

An apparatus for performing a SubByte function of the Rijndael Block Cipher, 
comprising: 

an S-box constructed by composing a first and second transformation, 
wherein the first transformation is a look-up tabl o -f OOO), and the second transformation 
is an affine-all transformation that performs both an affine and inverse affine 
transformation. 

2. (CURRENTLY amended) 

The apparatus as claimed in claim 1, wherein: 

the look-up table *(9©6)»is tfie multiplicative inverse in the finite field GF(2*) 
having {00} mapped to itself; and 

the affine-all transformation is implemented using a combinational logic circuit 

3. (CURRENTLY amended) 

The apparatus as claimed in claim 2, wherein: 

the look-up table- (300>i s implemented by a read-only memory (ROM); and 
the combinational logic circuit ^ (400) i mplements the equations 

b*o=[(bo • po)©(bi • pi)e(b2 • P2)®(b3 • P3)e(b4 • P4)®(b5 • P5)®(b6 • P6)e(b7 • P7)]©vo 
b'i=[(bo • p7)©(b| • po)e(b2 • pi)©(b3 • P2)e(b4 • P3)®(b5 • P4)®(b6 • P5)®(b7 • P6)]©Vi 

b*2=[(bo • P6)®(bl • P7)©(b2 ■ P0)®(b3 • Pl)e(b4 • P2)e(b5 • P3)©(b6 • P4)®(b7 • P5)]eV2 
b'3=[(bo • P5)©(bl • P6)e(b2 ' P7)e(b3 • Po)e(b4 • Pl)e(b5 • P2)e(b6 • P3)e(b7 • P4)]®V3 
b'4=[(bo • P4)®(bl • P5)©(b2 • P6)®(b3 • P7)©(b4 • Po)©(b5 • Pl)®(b6 • P2)®(b7 • P3)]®V4 
b'5=[(bo • P3)®(bl • P4)©(b2 • P5)®(b3 • P6)®(b4 • P7)©(b5 • Po)®(b6 • Pl)©(b7 • P2)]®V5 
b'6=[(bo • P2)®(b| • P3)©(b2 • P4)©(b3 • P5)®(b4 • P6)®(b5 • P7)®(b6 • Po)e(b7 ' Pl)]©V6 
b*7=[(bo • Pl)®(bi • P2)e(b2 • P3)©(b3 • P4)©(b4 • P5)©(b5 • P6)©(b6 • P7)©(b7 • Po)]©V7 
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having p = poPiP2P3p4P5P6P7 as a load pattern consisting of { 10001 1 1 1 } for the afiRne 
transformation and {00100101 } for the inverse affine transformation and having v as a 
load 

vector = V0V1V2V3V4V5V6V7 consisting of {1 10001 10} for the affine transformation and 
{10100000} for the inverse afiSne transformation. 

4. (CURRENTLY amended) 

An apparatus for encrypting and decrypting data, comprising: 

a data processing module arranged to perform a byte substitution, wherein at 
least part of said data processing module comprises: 
a look-up table (300>, 

a storage device for storing the look-up table, and 
a circuit (10Q>h aving shared logic that performs a single transform that 
accomplishes either an affine and an inverse affine transformation. 

5. (CURRENTLY amended) 

The apparatus as claimed in claim 4 wherein said look-up table -(Se^is a 
multiplicative inverse of the finite field GF(2^). 

6. (CURRENTLY AMENDED) 

The apparatus as claimed in clahn 5, wherein said look-up table f9ee)»is 
implemented by means of a read only memory (ROM). 

7. (CURRENTLY AMENDED) 

The apparatus as claimed in claim 4, wherem said look-up table«(300)'is 
implemented by means of a read only memory (ROM). 
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8. (ORIGINAL) 

The apparatus as claimed in claim 4, wherein the apparatus comprises a plurality 
of instances of a data processing module arranged in a data processing pipeline. 

9. (ORIGINAL) 

The apparatus as claimed in claim 4, wherein the apparatus is arranged to 
perform encryption or decryption in accordance with the Rijndael Block Cipher, and 
wherein the data processing module is arranged to implement a Rijndael round. 

10. (ORIGINAL) 

An apparatus as claimed in claim 9, wherein the data processing module is 

arranged to implement the SubByte transformation of the Rijndael round usmg the look- 
up table composed with the afBne transformation for encryption and the inverse afiQne 
transformation for decryption. 

11. (CURRENTLY AMENDED) 

The apparatus as claimed in claim 10, wherein said look-up table*(aee)'is 
implemented by means of a read only memory (ROM). 

12. (ORIGINAL) 

A apparatus for performing a SubByte function of a round of the Rijndael Block 

Cipher, comprising an S-box constructed by composing, 

means for obtaining the multiplicative inverse in the finite field GF(2^), and 
means for performing an afSne-all transformation consisting of an afiBne and 

inverse affine transformation as a single afifine transformation. 

13. (CURRENTLY AMENDED) 

The apparatus as claimed in claim 12, wherein said means for obtaining the 
multiplicative inverse is a look-up table-^30^, and said means for performing the afiBne- 
all transformation is a combinational logic circuit (100). 
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14. (CURRENTLY AMENDED) 

A method for performing a SubByte function of a Rijndael round of flie Rijndael 
Block Cipher, comprising the steps of: 

creating a look-up table^^dO^^for the multiplicative inverse in the finite field 

GF(2^); 

providing an affine-all transformation consisting of an affine and inverse afiRne 
transformation in a single affine transformation; 

composing an S-box constructed of the look-up table <3Q0> and the affine-all 
transformation; and 

performing a non-linear byte substitution using the composed S-box. 

15. (CURRENTLY AMENDED) 

The method of claim 14, wherein the providing step further comprises the step 

of providing a shared logic circuit' ('100>t hat performs the single affine transformation. 

16. (CURRENTLY AMENDED) 

The method of claim 14, further comprising the step of storing the look-up table 

■ (300 )' i n a read-only memory (ROM). 

17. (CURRENTLY AMENDED) 

The method of claim 16, wherein the providing step further comprises the step 
of implementing a shared logic circuit-(4ee)-that performs the single aflRne 
transformation. 

18. (CURRENTLY AMENDED) 

The method of claim 14, wherein: 

the look-up table (30Q )»is the multiplicative inverse in the finite field GF(2^) 
having {00} mapped to itself; and 

the providing step further comprises the step of implementing a combinational 
logic circuit ^4©e>that performs the single affine transformation-f^Oe^. 
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